{"id":33686,"date":"2019-10-31T21:54:10","date_gmt":"2019-10-31T18:54:10","guid":{"rendered":"https:\/\/prohoster.info\/blog\/novaya-uyazvimost-zatragivaet-prakticheski-kazhdyj-chip-intel-proizvedyonnyj-s-2011-goda\/"},"modified":"2019-10-31T21:54:10","modified_gmt":"2019-10-31T18:54:10","slug":"novaya-uyazvimost-zatragivaet-prakticheski-kazhdyj-chip-intel-proizvedyonnyj-s-2011-goda","status":"publish","type":"post","link":"https:\/\/prohoster.info\/ro\/blog\/news\/novaya-uyazvimost-zatragivaet-prakticheski-kazhdyj-chip-intel-proizvedyonnyj-s-2011-goda","title":{"rendered":"Au trecut \u00eenc\u0103 \u0219ase luni \u0219i proiectul Repology, \u00een cadrul c\u0103ruia se adun\u0103 \u0219i compar\u0103 regulat informa\u021biile despre versiunile pachetelor din numeroase.","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Speciali\u0219tii \u00een securitate informatic\u0103 au descoperit o nou\u0103 vulnerabilitate \u00een cipurile Intel, care poate fi folosit\u0103 pentru a fura informa\u021bii confiden\u021biale direct din procesor. Cercet\u0103torii au numit-o \u201eZombieLoad\u201d. ZombieLoad este un atac de tip side-channel, destinat cipurilor Intel, care permite hackerilor s\u0103 utilizeze eficient o sl\u0103biciune din arhitectura acestora pentru a ob\u021bine date arbitrare, dar nu permite introducerea \u0219i executarea de cod mali\u021bios arbitrar, astfel \u00eenc\u00e2t utilizarea ei ca instrument singular pentru p\u0103trunderea \u0219i spargerea computerelor de la distan\u021b\u0103 este imposibil\u0103.<\/p>\n

\"Au<\/p>\n

Conform Intel, ZombieLoad const\u0103 \u00een patru erori \u00een microcodul procesoarelor sale, despre care cercet\u0103torii au informat compania cu doar o lun\u0103 \u00een urm\u0103. Vulnerabilit\u0103\u021bile afecteaz\u0103 aproape toate calculatoarele cu procesoare Intel lansate \u00eencep\u00e2nd din 2011. Procesoarele ARM \u0219i AMD nu sunt afectate de aceast\u0103 vulnerabilitate.<\/p>\n

ZombieLoad aminte\u0219te de celebrele Meltdown \u0219i Spectre, care au exploatat o eroare \u00een sistemul de execu\u021bie speculativ\u0103 a instruc\u021biunilor. Execu\u021bia speculativ\u0103 ajut\u0103 procesoarele s\u0103 prezic\u0103, p\u00e2n\u0103 la un punct, ce ar putea necesita aplica\u021bia sau sistemul de operare \u00een viitor apropiat, ceea ce face ca aplica\u021bia s\u0103 func\u021bioneze mai rapid \u0219i mai eficient. Procesorul va returna rezultatele predic\u021biilor sale, dac\u0103 acestea se dovedesc corecte, sau va anula rezultatele execu\u021biei, dac\u0103 predic\u021bia s-a dovedit fals\u0103. At\u00e2t Meltdown, c\u00e2t \u0219i Spectre abuzeaz\u0103 de aceast\u0103 func\u021bie pentru a ob\u021bine acces direct la informa\u021biile cu care opereaz\u0103 procesorul.<\/p>\n

<\/center><\/p>\n

ZombieLoad se traduce prin \u201e\u00eenc\u0103rcare zombi\u201d, ceea ce explic\u0103 par\u021bial mecanismul vulnerabilit\u0103\u021bii. \u00cen cursul atacului, procesorului i se ofer\u0103 o cantitate de date pe care nu o poate procesa corespunz\u0103tor, forcing procesorul s\u0103 cear\u0103 ajutor de la microcod pentru a preveni o defec\u021biune. De obicei, aplica\u021biile pot vedea doar datele proprii, dar eroarea generat\u0103 de supra\u00eenc\u0103rcarea procesorului permite ocolirea acestei restric\u021bii. Cercet\u0103torii au declarat c\u0103 ZombieLoad este capabil s\u0103 ob\u021bin\u0103 orice date utilizate de nucleele procesorului. Intel informeaz\u0103 c\u0103 o corectare a microcodului va ajuta la cur\u0103\u021barea bufferelor procesorului \u00een timpul supra\u00eenc\u0103rc\u0103rii, prevenind citirea de c\u0103tre aplica\u021bii a datelor care nu le sunt destinate.<\/p>\n

\u00cen demonstra\u021bia video a func\u021bion\u0103rii vulnerabilit\u0103\u021bii, cercet\u0103torii au ar\u0103tat c\u0103 aceasta poate fi utilizat\u0103 pentru a afla ce site-uri web viziteaz\u0103 o persoan\u0103 \u00een timp real, dar este la fel de u\u0219or de aplicat pentru a ob\u021bine, de exemplu, parole sau token-uri de acces folosite de utilizatori pentru sistemele de plat\u0103.<\/p>\n<\/p>\n

La fel ca Meltdown \u0219i Spectre, ZombieLoad afecteaz\u0103 nu doar PC-uri \u0219i laptopuri, ci \u0219i cloud-uri. servere<\/a>Vulnerabilitatea poate fi exploatat\u0103 pe ma\u0219ini virtuale care ar trebui s\u0103 fie izolate de alte sisteme virtuale \u0219i de dispozitivele lor gazd\u0103, pentru a ocoli poten\u021bial aceast\u0103 izolare. Astfel, Daniel Gruss, unul dintre cercet\u0103torii care a descoperit vulnerabilitatea, afirm\u0103 c\u0103 aceasta poate citi date din procesorul serverului la fel ca pe computerele personale. Aceasta reprezint\u0103 o problem\u0103 poten\u021bial grav\u0103 \u00een medii cloud, unde ma\u0219inile virtuale ale diferi\u021bilor clien\u021bi ruleaz\u0103 pe acela\u0219i echipament server. De\u0219i nu s-au raportat public atacuri utiliz\u00e2nd ZombieLoad, cercet\u0103torii nu pot excluse c\u0103 acestea ar fi putut avea loc, deoarece nu toate furturile de date las\u0103 urme.<\/p>\n

Ce \u00eenseamn\u0103 asta pentru utilizatorul obi\u0219nuit? Nu este nevoie s\u0103 panic\u0103. Aceasta nu este un exploit sau o vulnerabilitate de zi zero, c\u00e2nd un atacator poate prelua controlul computerului dumneavoastr\u0103 \u00eentr-o clip\u0103. Gruss explic\u0103 c\u0103 aplicarea ZombieLoad este \u201emai u\u0219oar\u0103 dec\u00e2t Spectre\u201d, dar \u201emai greu dec\u00e2t Meltdown\u201d \u2013 \u0219i ambele necesit\u0103 un anumit set de abilit\u0103\u021bi \u0219i eforturi pentru a fi utilizate \u00een atac. De fapt, pentru a efectua un atac folosind ZombieLoad, trebuie s\u0103 \u00eenc\u0103rca\u021bi \u00eentr-un fel o aplica\u021bie infectat\u0103 \u0219i s\u0103 o rula\u021bi singuri; atunci vulnerabilitatea va ajuta atacatorul s\u0103 descarce toate datele dumneavoastr\u0103. Cu toate acestea, exist\u0103 multe metode mult mai simple de a sparge un computer \u0219i a fura datele.<\/p>\n

Corporatia Intel a lansat deja microcodul pentru a corecta procesoarele vulnerabile, inclusiv cipurile Intel Xeon, Intel Broadwell, Sandy Bridge, Skylake \u0219i Haswell, Intel Kaby Lake, Coffee Lake, Whiskey Lake \u0219i Cascade Lake, precum \u0219i toate procesoarele Atom \u0219i Knights. Alte mari companii au lansat de asemenea corec\u021bii \u00een leg\u0103tur\u0103 cu vulnerabilitatea de partea lor. Apple, Microsoft \u0219i Google au eliberat, de asemenea, patch-uri corespunz\u0103toare pentru browserul lor.<\/p>\n

\u00centr-un interviu pentru portalul TechCrunch, Intel a declarat c\u0103 actualiz\u0103rile pentru microcodul cipurilor, ca \u0219i patch-urile precedente, vor influen\u021ba performan\u021ba procesoarelor. Un reprezentant al Intel a men\u021bionat c\u0103 majoritatea dispozitivelor de consum corectate pot pierde, \u00een cel mai r\u0103u caz, 3% din performan\u021b\u0103, iar pentru centrele de date pierderile pot ajunge p\u00e2n\u0103 la 9%. Cu toate acestea, conform Intel, este pu\u021bin probabil ca acest lucru s\u0103 fie observat \u00een majoritatea scenariilor.<\/p>\n

Cu toate acestea, inginerii Apple sunt complet \u00een dezacord cu Intel, care pe o pagin\u0103 special\u0103<\/a><\/noindex> Despre metoda de protec\u021bie complet\u0103 \u00eempotriva «Microarchitectural Data Sampling» (denumirea oficial\u0103 ZombieLoad) se afirm\u0103 c\u0103, pentru a \u00eenchide complet vulnerabilitatea, este necesar\u0103 dezactivarea total\u0103 a tehnologiei Intel Hyper-Threading \u00een procesoare, ceea ce, conform testelor speciali\u0219tilor de la Apple, poate reduce performan\u021ba dispozitivelor utilizatorilor cu p\u00e2n\u0103 la 40% \u00een anumite sarcini.<\/p>\n

Nici Intel, nici Daniel \u0219i echipa sa nu au publicat codul care implementeaz\u0103 vulnerabilitatea, astfel \u00eenc\u00e2t nu exist\u0103 o amenin\u021bare direct\u0103 \u0219i imediat\u0103 pentru utilizatorul obi\u0219nuit. Patch-urile eliberate rapid anuleaz\u0103 complet aceasta, dar, av\u00e2nd \u00een vedere c\u0103 fiecare astfel de corec\u021bie implic\u0103 anumite pierderi de performan\u021b\u0103 pentru utilizatori, exist\u0103 unele \u00eentreb\u0103ri adresate Intel.<\/p>\n

<\/p>\n

<\/center><\/p>\n

\t\t\t\t


\n\t\t\t\t\t\t\t\t<\/center>
Sursa: 3dnews.ru<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0447\u0438\u043f\u0430\u0445 Intel, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430. \u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043d\u0430\u0437\u0432\u0430\u043b\u0438 \u0435\u0451 «ZombieLoad». ZombieLoad — \u044d\u0442\u043e \u0430\u0442\u0430\u043a\u0430 \u043f\u043e\u0431\u043e\u0447\u043d\u043e\u0433\u043e \u0442\u0438\u043f\u0430, \u043d\u0430\u0446\u0435\u043b\u0435\u043d\u043d\u0430\u044f \u043d\u0430 \u0447\u0438\u043f\u044b Intel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0445\u0430\u043a\u0435\u0440\u0430\u043c \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u043a \u0432 \u0438\u0445 \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u0435 \u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445, \u043d\u043e \u043f\u0440\u0438 \u044d\u0442\u043e\u043c \u043e\u043d\u0430 \u043d\u0435 \u0434\u0430\u0451\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432\u043d\u0435\u0434\u0440\u0438\u0442\u044c \u0438 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":25371,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-33686","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Noua vulnerabilitate afecteaz\u0103 practic fiecare cip Intel fabricat din 2011 | ProHoster","description":"Exper\u021bii \u00een securitate cibernetic\u0103 au descoperit o nou\u0103 vulnerabilitate \u00een cipurile Intel, care poate fi utilizat\u0103 pentru a fura informa\u021bii confiden\u021biale direct din procesor.","canonical_url":"https:\/\/prohoster.info\/ro\/blog\/news\/novaya-uyazvimost-zatragivaet-prakticheski-kazhdyj-chip-intel-proizvedyonnyj-s-2011-goda","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"ro_RO","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041d\u043e\u0432\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043a\u0430\u0436\u0434\u044b\u0439 \u0447\u0438\u043f Intel, \u043f\u0440\u043e\u0438\u0437\u0432\u0435\u0434\u0451\u043d\u043d\u044b\u0439 \u0441 2011 \u0433\u043e\u0434\u0430 | ProHoster","og:description":"\u0421\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u044b \u043f\u043e \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u043b\u0438 \u043d\u043e\u0432\u0443\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u0447\u0438\u043f\u0430\u0445 Intel, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u043c\u043e\u0436\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0438\u0437 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u043e\u0440\u0430.","og:url":"https:\/\/prohoster.info\/ro\/blog\/news\/novaya-uyazvimost-zatragivaet-prakticheski-kazhdyj-chip-intel-proizvedyonnyj-s-2011-goda","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T18:54:10+00:00","article:modified_time":"2019-10-31T18:54:10+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"33686","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-09 17:03:20","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:35:31","updated":"2026-02-09 17:03:20","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/33686","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/comments?post=33686"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/33686\/revisions"}],"predecessor-version":[{"id":159073,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/posts\/33686\/revisions\/159073"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media\/25371"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/media?parent=33686"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/categories?post=33686"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/ro\/wp-json\/wp\/v2\/tags?post=33686"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}